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Amendments to the Specification 

Please replace the paragraph beginning at page 11, line 20, with the 
following amended paragraph: 

The isolated bus cycle interface 152 includes circuitry to interface to the 
isolated bus cycle signals to recognize and service isolated bus cycles, such as the 
isolated read and write bus cycles. The processor nub loader 52, as shown in 
Figure 1 A, includes a processor nub loader code and its digest (e.g., hash) value. 
The processor nub loader 52 is invoked by execution of an appropriate isolated 
instruction (e.g., Isojnit) and is transferred to the isolated area 70. From the 
isolated aroa 80 area 70 , the processor nub loader 52 copies the processor nub 18 
from the system flash memory (e.g., the processor nub code 18 in non-volatile 
memory 160) into the isolated area 70, verifies and logs its integrity, and manages a 
symmetric key used to protect the processor nub's secrets. In one embodiment, the 
processor nub loader 52 is implemented in read only memory (ROM). For security 
purposes, the processor nub loader 52 is unchanging, tamper-resistant and non- 
substitutable. The digest memory 154, typically implemented in RAM, stores the 
digest (e.g., hash) values of the loaded processor nub 18, the operating system nub 
16, and any other critical modules (e.g., ring-0 modules) loaded into the isolated 
execution space. The cryptographic key storage 155 holds a symmetric 
encryption/decryption key that is unique for the platform of the system 100. In one 
embodiment, the cryptographic key storage 155 includes internal fuses that are 
programmed at manufacturing. Alternatively, the cryptographic key storage 155 
may also be created with a random number generator and a strap of a pin. The 
isolated execution logical processor manager 156 manages the operation of logical 
processors operating in isolated execution mode. In one embodiment, the isolated 
execution logical processor manager 156 includes a logical processor count register 
that tracks the number of logical processors participating in the isolated execution 
mode. The token bus interface 1 59 interfaces to the token bus 1 80. A combination 
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of the processor nub loader digest, the processor nub digest, the operating system 
nub digest, and optionally additional digests, represents the overall isolated 
execution digest, referred to as isolated digest. The isolated digest is a fingerprint 
identifying the ring-0 code controlling the isolated execution configuration and 
operation. The isolated digest is used to attest or prove the state of the current 
isolated execution. 
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